False positive from Norton's AV for exporterinstall.exe

[AndrewT]

Norton by Symantec blocks and removes exporterinstall.exe and categorises the file to be a Heuristic Virus. The threat name is as follows: Suspicious.MH690 .

This has been reported to Norton's, and supposedly will be fixed in an update for it.

 

[Axe99]

Cheers for setting Norton straight

 

[OlukitzFudgey]

Apologies for the story Andrew T.


Reply from Norton:


In relation to the PdxExporterInstall.exe


Upon further analysis and investigation, we have verified your submission and, as such, the detection(s) for the following file(s) will be removed from our products:


Filename: PdxExporterInstall.exe


Result: Whitelisting for above file is available in Rapid Release definitions with a sequence number of 177232 or greater.


The latest Rapid Release definition available here:
ftp://ftp.symantec.com/AVDEFS/norton_antivirus/rapidrelease

To check the current sequence number of the Rapid Release definition:
http://www.symantec.com/security_response/definitions/rapidrelease/

More information on Rapid Release definitions can be found:
https://support.symantec.com/en_US/article.TECH103326.html


If detection persists, please contact support:
Norton: https://support.norton.com/sp/en/us/home/current/info
SEP: https://support.symantec.com/en_US/endpoint-protection.54619.html

Decisions made by Symantec are subject to change if alterations to the Software are made over time or as classification criteria and/or the policy employed by Symantec changes over time to address the evolving landscape.

If you are a software vendor and would like to upload your software for proactive whitelisting, please complete the following form: https://submit.symantec.com/whitelist/

For more information on best practices to reduce false positives:
http://www.symantec.com/content/en/...se_downloads-instill_trust_first_WP.en-us.pdf

Sincerely,
Symantec Security Response
http://securityresponse.symantec.com